城市(city): unknown
省份(region): unknown
国家(country): None
运营商(isp): unknown
主机名(hostname): unknown
机构(organization): unknown
使用类型(Usage Type): unknown
b; <<>> DiG 9.10.3-P4-Ubuntu <<>> 211.222.54.138
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 37165
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;211.222.54.138. IN A
;; AUTHORITY SECTION:
. 551 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2022021800 1800 900 604800 86400
;; Query time: 38 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Sat Feb 19 01:26:36 CST 2022
;; MSG SIZE rcvd: 107b'Host 138.54.222.211.in-addr.arpa not found: 2(SERVFAIL)
';; Got SERVFAIL reply from 183.60.83.19, trying next server
Server: 183.60.82.98
Address: 183.60.82.98#53
** server can't find 138.54.222.211.in-addr.arpa: SERVFAIL| IP | 类型 | 评论内容 | 时间 |
|---|---|---|---|
| 39.134.26.20 | attack | Jul 28 03:05:24 mail kernel: \[1537165.698252\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=39.134.26.20 DST=91.205.173.180 LEN=52 TOS=0x04 PREC=0x00 TTL=50 ID=22293 DF PROTO=TCP SPT=39920 DPT=6380 WINDOW=29200 RES=0x00 SYN URGP=0 Jul 28 03:05:25 mail kernel: \[1537166.700875\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=39.134.26.20 DST=91.205.173.180 LEN=52 TOS=0x04 PREC=0x00 TTL=49 ID=46261 DF PROTO=TCP SPT=30396 DPT=7001 WINDOW=29200 RES=0x00 SYN URGP=0 Jul 28 03:05:29 mail kernel: \[1537170.700622\] \[UFW BLOCK\] IN=eth0 OUT= MAC=00:50:56:3d:86:ee:00:08:e3:ff:fd:90:08:00 SRC=39.134.26.20 DST=91.205.173.180 LEN=52 TOS=0x04 PREC=0x00 TTL=49 ID=31223 DF PROTO=TCP SPT=32289 DPT=8088 WINDOW=29200 RES=0x00 SYN URGP=0 |
2019-07-28 17:10:17 |
| 1.213.195.154 | attackbots | Jul 28 07:26:56 MK-Soft-VM4 sshd\[20839\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.213.195.154 user=root Jul 28 07:26:59 MK-Soft-VM4 sshd\[20839\]: Failed password for root from 1.213.195.154 port 15254 ssh2 Jul 28 07:32:18 MK-Soft-VM4 sshd\[23998\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.213.195.154 user=root ... |
2019-07-28 16:35:25 |
| 134.175.91.246 | attack | GET /thinkphp/html/public/index.php HTTP/1.1 |
2019-07-28 16:28:13 |
| 201.54.213.81 | attackbotsspam | Jul 28 09:06:37 nextcloud sshd\[18637\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.54.213.81 user=root Jul 28 09:06:39 nextcloud sshd\[18637\]: Failed password for root from 201.54.213.81 port 56690 ssh2 Jul 28 09:39:33 nextcloud sshd\[28094\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.54.213.81 user=root ... |
2019-07-28 17:04:48 |
| 198.108.67.35 | attackspambots | " " |
2019-07-28 16:34:30 |
| 178.62.239.249 | attack | SSH Brute Force, server-1 sshd[13532]: Failed password for root from 178.62.239.249 port 43838 ssh2 |
2019-07-28 16:20:01 |
| 139.162.119.197 | attackspambots | Port scan and direct access per IP instead of hostname |
2019-07-28 16:18:44 |
| 110.80.25.11 | attackbotsspam | Port scan and direct access per IP instead of hostname |
2019-07-28 17:19:22 |
| 221.1.177.2 | attackbotsspam | failed_logins |
2019-07-28 16:33:44 |
| 12.247.117.222 | attackbots | Port scan and direct access per IP instead of hostname |
2019-07-28 17:10:37 |
| 46.229.161.131 | attack | Looking for resource vulnerabilities |
2019-07-28 17:08:16 |
| 93.114.82.239 | attack | Jul 28 09:00:59 mout sshd[8786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=93.114.82.239 user=root Jul 28 09:01:01 mout sshd[8786]: Failed password for root from 93.114.82.239 port 57726 ssh2 |
2019-07-28 16:30:40 |
| 106.78.160.193 | attackbotsspam | Automatic report - Port Scan Attack |
2019-07-28 16:54:04 |
| 41.225.238.164 | attackspam | Jul 28 02:52:01 iago sshd[18422]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.225.238.164 user=r.r Jul 28 02:52:03 iago sshd[18422]: Failed password for r.r from 41.225.238.164 port 54058 ssh2 Jul 28 02:52:03 iago sshd[18423]: Received disconnect from 41.225.238.164: 11: Bye Bye ........ ----------------------------------------------- https://www.blocklist.de/en/view.html?ip=41.225.238.164 |
2019-07-28 17:05:17 |
| 120.79.66.170 | attackbots | Port scan and direct access per IP instead of hostname |
2019-07-28 17:11:00 |